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DEPARTMENT  OF  JUSTICE 

Law  Enforcement  Assistance 
Administration 

[  28  CFR  Part  22  ] 

CONFIDENTIALITY  OF  IDENTIFIABLE  RE¬ 
SEARCH  AND  STATISTICAL  INFORMA¬ 
TION 

Proposed  Regulations  Governing  Grant 
Program  Information 

The  Law  Enforcement  Assistance  Ad¬ 
ministration  proposes  to  issue  regulations 
governing  the  confidentiality  of  individ¬ 
ually  identifiable  research  and  statistical 
information  collected  under  LEAA  grant 
programs.  The  purpose  of  these  regula¬ 
tions  is  to  implement  section  524(a)  of 
the  Crime  Control  Act  of  1973,  Pub.  L. 
93-83,  87  Stat.  197,  to  protect  the  pri¬ 
vacy  of  individuals  by  requiring  that  in¬ 
formation  identifiable  to  a  private  person 
obtained  in  a  research  or  statistical  pro¬ 
gram  funded  by  LEAA  may  only  be  used 
and/or  revealed  for  the  purpose  for  which 
it  was  obtained. 

A  hearing  on  the  proposed  regulations 
will  be  held  on  Thursday,  October  16, 
1975,  beginning  at  10  a.m.  in  Room  332 
of  the  Federal  Trade  Commission  Build¬ 
ing,  7th  and  Pennsylvania  Avenue,  NW., 
Washington,  D.C.  Interested  persons  who 
wish  to  testify  should  notify  Thomas 
Madden,  Oeneral  Counsel,  Law  Enforce¬ 
ment  Assistance  Administration,  633 
Indiana  Avenue,  NW.,  Washington,  D.C. 
20531,  no  later  than  October  13,  1975. 

Written  views  on  the  proposed  regula¬ 
tions  should  be  submitted  to  the  LEAA 
Office  of  (jreneral  Counsel  no  later  than 
November  10, 1975. 

Pursuant  to  the  authority  vested  in  the 
Law  Enforcement  Assistance  Adminis¬ 
tration  by  Sections  501  and  524  of  the 
Omnibus  Crime  Control  and  Safe  Streets 
Act  (42  U.S.C.  3701  et  seq.) ,  as  amended 
by  Pub.  L.  93-83,  87  Stat.  197,  it  is  pro¬ 
posed  that  a  new  Part  22  be  added  imme¬ 
diately  after  Part  21  of  Chapter  I  of  Title 
28,  Code  of  Federal  Regulations  to  read 
as  set  forth  below: 

PART  22— CONFIDENTIALITY  OF  IDENTI¬ 
FIABLE  RESEARCH  AND  STATISTICAL 
INFORMATION 

Sec. 

22.1  Purpose. 

22.2  Definitions. 

22.20  Applicability. 

22^21  Use  of  Identifiable  data. 

22.22  Revelation  of  identifiable  data. 

22.23  Privacy  certification. 

22.24  Information  transfer  agreement. 

22.25  Final  disposition  of  Identifiable  ma¬ 

terials. 

22.26  Bequests  for  transfer  of  Information. 

22.27  Notification. 

22.28  Use  of  research  or  statistical  data  for 

Judicial  or  administrative  purposes. 

22.29  Sanctions. 

Authority:.  Pub.  L.  93-83,  87  Stat.  197, 
(42  U.S.C.  3701,  et  seq.), 

§  22.1  Purpose. 

The  purpose  of  these  regulations  is  to: 

(a)  Protect  privacy  of  individuals  by 
requiring  that  information  identifiable 
to  a  private  person  obtained  in  a  research 
or  statistical  program  may  only  be  used 
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and/or  revealed  for  the  purpose  for 
which  obtained: 

(b)  Insure  that  such  information  shall 
not,  without  the  consent  of  the  person 
furnishing  such  information,  be  ad¬ 
mitted  as  evidence  or  used  for  any  pur¬ 
pose  in  any  judicial  or  administrative 
proceedings ; 

(c)  Increase  the  credibility  and  reli¬ 
ability  of  federally-supported  research 
and  statistical  findings  by  minimizing 
subject  concern  over  subsequent  uses  of 
identifiable  information: 

(d)  Provide  needed  guidance  to  persons 
engaged  in  research  and  statistical  ac¬ 
tivities  by  clarifying  the  purposes  for 
which  identifiable  information  may  be 
used  or  revealed :  and 

(e)  Insure  appropriate  balance  between 
individual  privacy  and  essential  needs  of 
the  research  community  for  data  to  ad¬ 
vance  the  state  of  knowledge  in  the  area 
of  criminal  justice. 

§  22.2  Definitions. 

(a)  Person — means  any  individual, 
partnership,  corporation,  association, 
public  or  private  organization  or  govern¬ 
mental  entity,  or  combination  thereof. 

(b)  Private  Person — means  any  per¬ 
son  as  defined  in  section  2(a)  other  than 
an  agency,  or  department  of  Federal, 
State,  or  local  government,  or  any  com¬ 
ponent  or  combination  thereof. 

(c)  Research  or  Statistical  Project — 
means  any  program,  project,  or  copipo- 
nent  thereof  which  is  supported  in  whole 
or  in  part  with  funds  appropriated  un¬ 
der  the  Act  and  whose  purpose  is  to  de¬ 
velop,  measure,  evaluate,  or  otherwise 
advance  the  state  of  knowledge  in  a  par¬ 
ticular  area.  The  term  does  not  include 
“intelligence”  or  other  information¬ 
gathering  activities  in  which  information 
pertaining  to  specific  individuals  is  ob¬ 
tained  for  purposes  directly  related  to 
enforcement  of  the  criminal  laws. 

(d)  Research  or  Statistical  Informa¬ 
tion — means  any  information  which  is 
collected  during  the  conduct  of  a  re¬ 
search  or  statistical  project  or  derived 
from  such  information,  and  which  is  in¬ 
tended  to  be  utilized  for  research  or  sta¬ 
tistical  purposes.  The  term  includes  in¬ 
formation  which  is  collected  directly 
from  the  individual  or  obtained  from  any 
agency  or  individual  having  possession, 
knowledge  or  control  thereof. 

(e)  Information  Identifiable  to  a  Pri¬ 
vate  Person — means  information  which 
either — 

(1)  Is  labelled  by  name  or  other  iden- 
tiflcaticm,  or 

(2)  Can,  by  virtue  of  sample  size  or 
other  factors,  be  reasonably  interpreted 
as  referring  to  a  particular  private 
person. 

(f)  Recipient  of  Assistance — means 
any  recipient  of  a  grant,  contract,  inter¬ 
agency  agreement,  subgrant,  or  subcon¬ 
tract  under  the  Act  effective  on  or  after 
July  1,  1973,  and  any  person  employed 
by  such  recipient  in  connection  with  per¬ 
formances  of  the  grant,  contract,  or  in¬ 
teragency  agreement. 

(g)  Officer  or  Employee  of  the  Federal 
Government — means  any  person  em¬ 
ployed  as  a  regular  or  special  employee 


of  the  U.S.  (including  experts,  consult¬ 
ants,  and  advisory  board  members)  as  of 
July  1,  1973,  or  at  any  time  thereafter. 

(h)  The  Act,  means  the  Omnibus 
Crime  Control  and  Safe  Streets  Act,  42 
U.S.C.  3701  et  seq.,  as  amended  by  the 
Crime  Control  Act  of  1973. 

(i)  Ai^cant — ^means  any  person  who 
is  authorized  to  apply  for  a  grant,  con¬ 
tract,  or  subgrant  to  be  fimded  pursuant 
to  the  Act. 

§  22.20  Applicability. 

(a)  These  regulations  govern  use  and 
revelation  of  research  and  statistical  in¬ 
formation  obtained,  collected  or  produced 
either  directly  by  LEAA  or  under  any 
interagency  agreement,  grant,  contract, 
subgrant,  or  subcontract  awarded  under 
the  Act,  and  outstanding  as  of  July  1, 
1973,  or  entered  into  thereafter. 

(b)  The  regulations  do  not  apply  to 
any  records  from  which  identifiable  re¬ 
search  or  statistical  information  was 
originally  obtained:  or  to  any  records 
which  are  designated  imder  existing  stat¬ 
utes  as  public. 

(c)  The  regulations  do  not  apply  to 
any  information  which  is  not  specifically 
related  to  the  scope  of  the  project,  and 
would  exclude  information,  concerning 
activities  which  are  extraneous  to  the  ac¬ 
tivities  under  consideration. 

§  22.21  Use  of  identifiable  data. 

Research  or  statistical  information 
identifiable  to  a  private  person  may  be 
used  only  for  the  purpose  of  attaining 
research  or  statistical  objectives.  In¬ 
dividually  identifiable  information  may 
not  be  used  to  cause  legal,  economic, 
physical  or  social  harm  to  the  individual. 

§  22.22  Revelation  of  identifiable  data. 

Research  and  statistical  information 
identifiable  to  a  private  person  may  be 
revealed  on  a  need-to-know  basis  only 
to— 

(a)  Officers,  employees  and  subcon¬ 
tractors  of  the  recipient  of  assistance: 

(b)  LEAA  staff:  and 

(c)  Persons  or  organizations  for  re¬ 
search  or  statistical  purposes.  Informa¬ 
tion  may  only  be  transferred  for  such 
purposes  upon  a  clear  demonstration  that 
the  standards  of  §  22.26  have  been  met, 
except  that  when  information  is  trans¬ 
ferred  to  persons  other  than  LEAA  or 
project  staff,  that  the  transfers  shall  have 
been  conditioned  on  compliance  with  a 
§  22.24  agreement. 

§  22.23  Privacy  certification. 

(a)  Each  applicant  for  LEAA  support 
either  directly  or  imder  a  State  plan 
shall  submit,  as  a  condition  of  approval 
of  any  grant  application  or  contract  pro¬ 
posal,  a  Privacy  Certificate. 

(b)  Thev  Privacy  Certificate  shall 
briefly  describe  the  project  and  shall  in¬ 
dicate  whether  or  not  research  or  statis¬ 
tical  information  identifiable  to  private 
individuals  will  be  collected  or  produced 
thereimder. 

(c)  The  Privacy  Certificate  shall  con¬ 
tain  assurance  by  the  applicant  that: 

(1)  Data  identifiable  to  a  private  per¬ 
son  will  not  be  used,  revealed  or  author¬ 
ized  for  revelation  pursuant  to  §  22.24 
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(2) (a),  except  as  authorized  under 

S$  22.21,  22.22. 

(2)  Access  to  data  will  be  limited  to 
those  employees  having  a  need  there¬ 
fore,  and  that  such  persons  shall  be  ad¬ 
vised  of,  and  agree  to  comply  with  these 
regulations. 

(3)  All  subcontracts  will  contain  con¬ 
ditions  meeting  the  requirements  of 
§  22.24. 

(4)  To  the  extent  required  by  §  22.27 
any  private  persons  from  whom  identifi¬ 
able  data  is  collected  or  obtained,  either 
orally  or  by  means  of  written  question¬ 
naire,  shall  be  advised  of  the  purposes 
for  which  such  data  may  be  utilized;  that 
compilance  with  requests  for  informa¬ 
tion  is  not  mandatory;  and  that  such 
data  will  not  be  subject  to  legal  process 
without  consent  of  the  individual  in¬ 
volved  but  that  such  protections  do  not 
extend  to  information  which  is  unre¬ 
lated  to  project  research  and  statistical 
objectives. 

(5)  Adequate  precautions  will  be  taken 
to  insure  administrative  and  physical  se¬ 
curity  of  identifiable  data; 

(6)  A  log  will  be  maintained  indicating 
that  identifiable  data  have  been  trans¬ 
mitted  to  persons  other  than  LEAA  or 
grantee/contractor  staff  or  subcontrac¬ 
tors,  and  that  such  data  have  been  re¬ 
turned. 

(7)  Project  plans  will  be  designed  to 
preserve  anonymity  of  private  persons 
to  whom  information  relates,  including, 
where  appropriate,  name-stripping,  cod¬ 
ing  of  data,  or  other  similar  procedures. 

(8)  Project  reports  will  contain  no 
data  identifiable  to  a  private  individual. 

(d')  The  applicant  shall  attach  to  the 
Privacy  Certification  a  description  of 
physical  and/or  administrative  proce¬ 
dures  to  be  followed  in  insuring  security 
of  information. 

§  22.24  Information  transfer  agreement. 

Prior  to  the  transfer  of  any  identifi¬ 
able  information  to  persons  other  than 
LEAA  or  project  staff,  an  agreement 
shall  be  entered  into  which  shall  pro¬ 
vide,  as  a  minimum,  that  the  recipient 
of  data  agrees  that: 

(a)  Information  identifiable  to  a  pri¬ 
vate  individual  will  be  used  only  for  the 
purposes  stated  in  the  transfer  agree¬ 
ment. 

(b)  Information  identifiable  to  a  pri¬ 
vate  individual  will  not  be  revealed  to 
any  person  for  any  purpose  except 
where — 

(1)  The  information  has  been  in¬ 
cluded  in  research  findings  (and/or  data 
bases)  and  is  revealed  on  a  need-to- 
know  basis  for  research  or  statistical 
purposes,  provided  that  such  transfer  is 
approved  by  the  person  providing  in¬ 
formation  under  the  agreement,  or 

(2)  Is  authorized  under  §  22.24(e) . 

(c)  Knowingly  or  wilfully  using  or 
disseminating  information  contrary  to 
the  provisions  of  the  agreement  shall 
constitute  a  violation  of  these  regula¬ 
tions,  punishable  in  accordance  with  the 
Act. 

(d)  Adequate  administrative  and 
physical  precautions  will  be  taken  to 
assure  security  of  information  obtained 
for  such  purpose. 


(e)  Access  to  information  will  be  lim¬ 
ited  to  those  employees  or  subcontrac¬ 
tors  having  a  need  therefore  in  connec¬ 
tion  with  performance  of  the  activity 
for  which  obtained,  and  that  such  per¬ 
sons  shall  be  advised  of,  and  agree  to 
comply  with  these  regulations. 

(f)  Project  plans  will  be  designed  to 
preserve  anonymity  of  private  persons 
to  whom  information  relates,  including, 
where  appropriate,  required  name-strip¬ 
ping  and/or  coding  of  data  or  other 
similar  procedures. 

(g)  Project  findings  and  reports  pre¬ 
pared  for  dissemination,  will  not  contain 
information  which  can  reasonably  be 
expected  to  be  identifiable  to  a  private 
individual. 

(h)  Information  identifiable  to  a  pri¬ 
vate  individual  (obtained  in  accordance 
with  this  agreement)  will,  unless  other¬ 
wise  agreed  upon,  be  returned  upon 
completion  of  the  project  for  which 
obtained. 

§  22.25  Final  disposition  of  identifiable 
materials. 

(a)  Upon  completion  of  a  research  or 
statistical  program  the  security  of  iden¬ 
tifiable  research  or  statistical  informa¬ 
tion  shall  be  protected  either  by — 

(1)  Complete  physical  destruction  of 
all  copies  of  the  materials  or  the  identi¬ 
fiable  portion  of  such  materials, 

(2)  Transmission  of  the  materials  to 
the  Law  Enforcement  Assistance  Ad¬ 
ministration  for  storage  in  a  Federal 
Records  Center,  or 

(3)  Removal  of  identifiers  from  data; 
forwarding  of  name  code  index  to  LEAA, 
and  retention  of  data  in  unidentified 
form  by  grantee. 

(b)  Final  disposition  of  information 
transferred  pursuant  to  an  agreement 
under  §  22.24  shall  be  made  upon  return 
of  such  Information. 

(c)  The  recipient  of  assistance  shall 
advise  LEAA  the  method  of  disposition. 

§  226.26  Requests  for  transfer  of  infor¬ 
mation.  ^ 

(a)  Requests  for  transfer  of  infor¬ 
mation  identifiable  to  an  individual  shall 
be  submitted  to  either  the  person  sub¬ 
mitting  the  Privacy  Certificate  pursuant 
to  §  22.23  or  the  LEAA  (where  records 
have  been  transmitted  to  LEAA). 

(b)  Except  where  information  is  re¬ 
quested  by  LEAA,  the  request  shall  de¬ 
scribe  the  general  objectives  of  the  proj¬ 
ect  for  which  information  is  requested, 
and  specifically  justify  the  need  for  such 
information  in  identifiable  form.  The  re¬ 
quest  shall  also  indicate,  and  provide 
justification  for  the  conclusion: 

(1)  That  conduct  of  the  project  will 
not,  either  directly  or  indirectly  cause 
legal,  economic,  physical  or  social  harm 
to  individuals  ^^ose  identification  is  re¬ 
vealed  in  the  transfer  of  information. 

(2)  That  conduct  of  the  project  as  de¬ 
signed  would  not  be  expected  to  have  a 
detrimental  effect  on  overall  future  re¬ 
search  or  statistical  efforts  of  the  Federal 
or  State  government. 

(c)  Data  may  not  be  transferred  pur¬ 
suant  to  this  section  where  a  clear  show¬ 
ing  of  the  criteria  set  forth  above  is  not 
made  by  the  person  requesting  the  data. 


§  22.27  Notification. 

(a)  Except  as  noted  in  S  22.27(c),  any 
person  from  whom  information  is  to  be 
obtained  directly,  either  orally,  by  ques¬ 
tionnaire  or  otlMr  written  documents, 
shall  be  advised: 

(1)  Of  the  research  or  statistical  pur¬ 
poses  for  which  the  information  will  be 
utilized; 

(2)  The  information  identifiable  to  a 
private  person  will  not  be  used  or  re¬ 
vealed  for  any  purposes  imrelated  to  re¬ 
search  or  statistical  purposes; 

(3)  That  compliance  with  the  request 
for  information  is  entirely  voluntary; 
and 

(4)  That  identifiable  information  shall 
be  immune  from  legal  process,  and  shall 
not,  without  the  consent  of  the  person 
furnishing  such  information,  be  admitted 
as  evidence  or  used  for  any  purpose  in 
any  action,  suit,  or  other  judicial  or  ad¬ 
ministrative  proceedings,  and/or  be  sub¬ 
ject  to  legal  process  or  access  by  sub¬ 
poena  except  that  such  protection  does 
not  apply  to  information  which  is  unre¬ 
lated  to  project  research  or  statistical 
purposes. 

(b)  Except  as  noted  in  paragraph  (c) 
of  this  section,  where  information  is  to 
be  obtained  through  observation  of  in¬ 
dividual  activity  or  performance,  such 
individuals  shall  be  advised: 

(1)  Of  the  particular  types  of  infor¬ 
mation  to  be  collected; 

(2)  That  the  data  will  only  be  utilized 
for  research  or  statistical  piurposes; 

(3)  That  such  information  will  not  be 
used  or  revealed  in  a  form  identifiable  to 
the  individual  for  research  or  statistical 
purposes; 

(4)  That  participation  in  the  project 
in  question  is  voluntary,  and  may  be  ter¬ 
minated  at  any  time,  and 

(5)  That  identifiable  information  be¬ 
ing  collected  under  the  project  shall  be 
immune  from  legal  process,  and  shall  not, 
without  consent  of  the  individual  to 
whom  such  information  pertains  be  ad¬ 
mitted  as  evidence  or  utilized  in  any  judi¬ 
cial  or  administrative  proceedings,  except 
that  such  protections  shall  not  apply  to 
information  which  does  not  relate  to 
project  research  or  statistical  purposes. 

(c)  Disclosure,  as  described  in  para¬ 
graphs  (a)  and  (b)  of  this  section  may 
be  limited  when,  in  the  view  of  the  per¬ 
son  having  program  responsibility  for 
conduct  of  a  research  or  statistical  pro¬ 
gram,  such  disclosure  would  have  a  seri¬ 
ously  detrimental  effect  on  subject  par¬ 
ticipation  or  purpose  of  research  that 
would  make  conduct  of  the  program 
impossible. 

§  22.28  Use  of  research  or  statistical 
data  for  judicial  or  administrative 
purposes. 

(a)  Research  or  statistical  informa¬ 
tion  identifiable  to  an  individual  and/or 
copies  thereof  shall  be  immune  from  legal 
process  and  shall  only  be  admitted  as 
evidence  or  used  for  any  purpose  in  any 
action,  suit,  or  other  judicial  or  adminis¬ 
trative  proceeding  with  consent  of  the 
individual  providing  such  information, 
or,  in  any  case  in  which  information  is 
obtained  through  means  other  than  di- 
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reel  inquiry  of  the  individual,  the  indi¬ 
vidual  to  whom  the  data  pertains. 

(b)  Except  as  noted  below  consent 
shaU: 

(1)  Be  obtained  at  the  time  that  in¬ 
formation  is  sought  for  use  in  Judicial 
or  administrative  proceedings: 

(2)  Set  out  specific  purposes  in  con¬ 
nection  with  which  information  will  be 
used; 

(3)  Limit,  where  appropriate,  the 
scope  of  the  information  subject  to  such 
coiisent; 

(4)  Be  drafted  so  as  to  insure  that  re¬ 
fusal  to  allow  access  shall  not  be  con¬ 
sidered  as  an  admission  that  the  indi¬ 
vidual  was  or  was  not  a  participant  in 
the  research  or  statistical  project. 

§  22.29  Sanctions. 

Where  LEAA  believes  that  a  violation 
has  occurred  of  section  524(a),  these 
regulations,  or  any  grant  or  contract  con¬ 
ditions  entered  into  thereunder,  it  may 
initiate  administrative  actions  leading  to 
termination  of  a  grant  or  contract,  com- 
menqe  appropriate  personnel  and/or 
other  procedures  in  cases  involving  Fed¬ 
eral  employees,  and/or  undertake  appro¬ 
priate  legal  actions  leading  to  imposition 
of  a  fine  of  not  to  exceed  $10,000  against 
any  person  responsible  for  such  viola¬ 
tions. 

Richard  W.  Velde, 
Administrator.  Law  Enforcement 
Assistance  Administration. 

September  18, 1975. 

Commentary 

§  22.2  DEFINITIONS 

(a)  Based  on  Administrative  Proce¬ 
dure  Act  definition. 

(b)  Under  the  proposed  definition,  all 
“individuals”  are  “private  persons”  (e.g., 
no  distinction  is  made  between  an  “in¬ 
dividual”  acting  in  a  “private”  as  opposed 
to  “official”  capacity).  This  is  con¬ 
sistent  with  the  approach  followed  in 
the  APA  definition  of  “person,”  in  which 
a  private/ public  distinction  is  made  with 
respect  to  organizations,  but  does  not 
apply  to  “individuals.”  Note,  therefore, 
that  the  regulations  would  limit  use 
and  revelation  of  data  concerning  on- 
duty  activity  of  public  officials,  such  as 
police  officers,  where  such  data  was  ob¬ 
tained  for  a  research  or  statistical 
purpose. 

(c)  No  comment. 

(d)  Definition  follows  concept  used  by 
Bureau  of  the  Census. 

(e)  Definition  covers  subcontractors 
below  the  primary  level.  This  is  neces¬ 
sary  to  cover  multi-level  statistical 
projects. 

(f)  No  comment. 

(g)  No  comment. 

(h)  Definition  based  on  definition  used 
in  28  CPR  18.2(b). 

§  22.20  APPLICABILITY 

Critical  date  for  “violations”  is  actual 
date  of  promulgation  of  regulations 
rather  than  “effective  date”  of  Act 
(July  1,  1973)  since  quasi-criminal  sanc¬ 
tion  ($10,000  fine)  could  not  be  imposed 
retroactively  prior  to  date  of  enactment. 


The  exemption  in  paragraph  (b)  in¬ 
sures  that  limitations  on  use  or  revela¬ 
tion  of  research  or  statistical  data  do 
not  apply  to  uses  of  information  con¬ 
tained  in  administrative  files,  criminal 
justice  information  systems,  etc.,  from 
which  data  was  obtained  (e.g.,  data  in 
such  records  may  continue  to  be  used 
for  any  otherwise  authorized  purpose) 
or  to  records  which  are  designated  as 
public. 

The  regulations  in  paragraph  (c)  ex¬ 
clude  data  concerning  activities  which 
are  extraneous  to  the  nature  of 
activity  being  considered  in  the  project, 
and  hence  should  not  be  “protected” 
under  the  statute  (e.g.,  “research  and 
statistical  information”  would  not  in¬ 
clude  information  re:  assaults  or  prop¬ 
erty  damage  inflicted  by  respondents 
during  a  project  involving  only  the  ques¬ 
tioning  of  individual  prisoners,  although 
such  data  might  be  included  if  the 
project  objectives  related  to  observation 
of  prisoner  interaction  under  varying 
circumstances) . 

§  22.21  USE  OF  IDENTIFIABLE  DATA 

Under  this  provision,  the  limitation  on 
use  of  identifiable  information  would  be 
applicable — regardless  of  whether  data 
collection  activity  was  paid  out  of  LEAA 
or  match  funds.  This  position  is  justified 
in  the  fact  that  section  524(a)  refers  to 
information  “furnished  under  the  Act” — 
rather  than,  to  specific  information 
which  is  obtained  with  LEAA  fimds. 

§  22.22  REVELATION  OF  IDENTIFIABLE  DATA 

This  section  would  allow  revelation  of 
identifiable  information  to  LEAA  staff 
(including  RO’s) ;  and  other  persons  for 
research  and  statistics  purposes  (on 
condition  of  compliance  with  §  22.24 
agreement) .  Note  that  identifiable  infor¬ 
mation  could  be  used  or  revealed  for 
any  research  or  statistical  purpose  re¬ 
gardless  of  whether  or  not  it  was  re¬ 
lated  to  the  specific  objectives  in  the 
original  project. 

The  “need-to-know”  limitation  would 
preclude  release  of  information  in  iden¬ 
tifiable  form  for  longitudinal  or  other 
similar  studies,  when  the  objectives  of 
such  subsequent  projects  could  be  at¬ 
tained  through  use  of  names  stripped 
and/or  coded  data. 

The  “need-to-know”  limitation  would 
also  prohibit  inclusion  of  identifiable  data 
in  publications  or  reports. 

Data  could  be  revealed  in  symposia  or 
other  research-oriented  meetings,  how¬ 
ever  (if  needed  in  identifiable  form) ,  pro¬ 
vided  that  participants  entered  into 
S  22.24  agreements.  Note  that  since 
agreements  do  not  require  LEAA  review 
or  approval  the  procedure  should  not 
present  imdue  administrative  burdens. 
(Although  it  should  have  the  effect  of 
curtailing  “casual”  dissemination  of  data 
and  reinforcing  awareness  of  confidenti¬ 
ality  criteria) . 

§  22.23  PRIVACY  CERTIFICATION 

This  section  roughly  parallels  the  cer¬ 
tification  procedures  required  under  the 
National  Environmental  Protection  Act. 


Certificates  are  required  to  be  submitted 
by; 

(a)  Primary  grantees  and  contractors; 

(b)  Subgrantees; 

(c)  SPA’S  (where  involved  in  a  pro¬ 
gram — rather  than  administrative  func¬ 
tion)  .  Subcontractors  are  not  required  to 
comply  with  this  requirement  (but  are 
bound  by  agreements,  as  defined  under 
§  22.24) . 

The  provisions  of  the  certificates  are 
similar  to  recommendations  contained  in 
the  HEW  Task  Force  Report  on  Auto¬ 
mated  Personal  Data  Systems. 

§  22.24  information  TRANSFER  AGREEMENT 

The  agreement  is  intended  to  insure 
that  transferred  data  remain  subject  to 
privacy  protections.  (This  is  consistent 
with  recommendations  of  HEW  Task 
Force  Report.) 

Subsection  (b)  (1)  would  allow  identi¬ 
fiable  data  received  imder  the  agreement 
to  be  included  in  (and  subsequently  re¬ 
vealed  as  part  of)  data  developed  in  the 
project. 

§  22.25  FINAL  DISPOSITION  OF 

identifiable  materials 

No  comment. 

§  22.26  REQUEST  FOR  TRANSFER  OF 
INFORMATION 

This  section  provides  for  access  to  in¬ 
formation  which  has  been  transferred  to 
LEAA  pursuant  to  9  22.25,  and  would 
apply  to  requests  from  the  original  re¬ 
searcher  and/or  other  persons  or  organi¬ 
zations. 

Note  that  strict  criteria  for  review  of 
the  project  for  which  data  is  requested 
have  been  Included  to  insme  that  such 
transfers  of  data  ostensibly  for  research 
purposes  would  not  harm  the  individual 
providing  original  data  (e.g.,  in  cases  in 
which  subsystem  “research”  might  be 
conducted  by  a  law  enforcement  agency) . 

9  22.27  NOTIFICATION 

Subsections  (a)  and  (b)  have  been  set 
out  separately  to  distinguish  between  (a) 
projects  in  which  data  is  provided  in  re¬ 
sponse  to  specfiic  questions  and  (b)  proj¬ 
ects  in  wUch  information  is  obtained 
through  observation  of  subject  participa¬ 
tion  in  a  project. 

Subsection  (c)  represents  a  compro¬ 
mise  betY^een  subjects  right  to  be  advised 
of  the  purpose  for  which  information  is 
given,  and  research  problems  arising 
where  overly  detailed  explanations  are 
given  to  subjects. 

9  22.28  USE  OF  RESEARCH  OR  STATISTICAL 

DATA  FOR  JUDICIAL  OR  ADMINISTRATIVE 

PURPOSES 

Section  22.28  expands  on  the  statutory 
language  (which  requires  consent  only 
from  the  individual  “furnishing  the  in¬ 
formation”) — SO  as  to  cover  the  case  in 
which  data  is  “furnished”  by  a  person 
other  than  the  individual  to  whom  it  per¬ 
tains  (e.g.,  where  data  is  obtained  from  a 
criminal  justice  information  system,  ad¬ 
ministrative  records,  etc.) . 

Note,  however,  that  since  the  defini¬ 
tion  of  “research  or  statistical  informa¬ 
tion”  is  limited  to  information  “collected 
or  obtained  during  and  for  the  purpose 
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of  conduct  of  the  .  .  .  project”  the  regu¬ 
lations  would  not  preclude  the  researcher 
or  any  third  par^  from  reporting  and/or 
producing  evidence  with  respect  to  “un¬ 
related  activities”  which  may  occur  dur¬ 
ing  the  conduct  of  the  project  (e.g.,  as¬ 
saults/thefts  which  occur  during  a  proj¬ 
ect  whose  objectives  do  not  pertain  to 
observation  of  individual  behavior). 

Note  also  that  the  privilege  applies  to 
“research  or  statistical  information,” 
rather  than  to  “copies”  of  such  informa¬ 
tion — as  indicated  in  the  Ad  (l.e..  the 


PROPOSED  RULES 

statutory  reference  to  "copies”  is  inter¬ 
preted  as  indicating  that  this  was  in¬ 
tended  to  apply  to  the  “data”  rather 
than  to  the  Individual  revealing  or  utiliz¬ 
ing  such  data.)  This  interpretation  re¬ 
flects  the  fact  that  distinction  between 
oral  testimony  and  written  submissions 
would  be  Inconsistent  with  the  theory  of 
the  “privilege.” 

S  23.29  SANCTIONS 

Sanctions  are  made  available  against 
“any  person  responsible  for  violations.” 


44037 

This  would  include  the  grantee  organi¬ 
zation.  as  well  as  particular  individuals 
(including  grantee  employees)  commit¬ 
ting  violations.  Actions  against  Federal 
employees  are  based  on  Title  18  n.S.C. 
1905  (prohibiting  disclosures  of  conflden- 
tial  information) .  Violations  of  9  22.24 
agreements  would  also  be  subject  to  sanc¬ 
tions  since  regulations  require  that  ac¬ 
cess  to  data  is  conditioned  on  compliance 
with  agreement. 
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